CVE-2026-91250

Summary

This vulnerability allows low-privileged attackers with network access to completely compromise Oracle SOA Suite through its Adapters component, potentially affecting other products due to scope change. The flaw enables attackers to gain full control over the affected system.

Exploitability

The vulnerability is easily exploitable with low privileges and requires only network access via multiple protocols, making it highly accessible to attackers without significant preconditions.

Blast radius

Successful exploitation could lead to complete takeover of Oracle SOA Suite and potentially impact additional Oracle Fusion Middleware products due to the scope change in this vulnerability.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Oracle SOA Suite 12.2.1.4.0 or 14.1.2.0.0 which contain the fix for this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.